Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
File: BADXfvnqDtKVK-L2D6067MLhaKw.mft (raw, json)
Hash identifier: U7s279WVx79rapOIlsdplOdcnyw/DUlxcYWhuR9tBK4=
Subject key identifier: 79:E3:05:8E:F1:15:AA:38:F6:5E:7C:62:D3:5D:C3:0A:75:DC:E2:91
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Certificate issuer: /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial: 0198D73BC522498F6AFD7592E58425F272F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
Manifest number: 096B
Signing time: Sat 23 Aug 2025 14:01:15 +0000
Manifest this update: Sat 23 Aug 2025 14:01:15 +0000
Manifest next update: Sun 24 Aug 2025 14:01:15 +0000
Files and hashes: 1: BADXfvnqDtKVK-L2D6067MLhaKw.crl (hash: 3Hi3522bbm6c/GuqwymB88Lpz0TK5ri1xDxk/f1EBHs=)
2: jgMTcyosgm7FIVLeAPtI1RSjhVU.roa (hash: g2bFBV/1uz4ha4E7siEdgYNeYk8szBDsVWWKSTGKJE4=)
3: pO3Lr4jiN61Kn49lUDVd_S0OVvM.roa (hash: mIykw56twR66Kx0cZsZgXBwa4bIpNsTJWsybM0eym2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:c5:22:49:8f:6a:fd:75:92:e5:84:25:f2:72:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Validity
Not Before: Aug 23 14:01:15 2025 GMT
Not After : Aug 24 14:01:15 2025 GMT
Subject: CN=79e3058ef115aa38f65e7c62d35dc30a75dce291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:69:2b:ec:50:58:18:92:de:97:08:0f:20:
95:69:79:14:e4:b3:d2:89:3c:d5:95:d7:54:f3:61:
41:ea:8d:25:96:1a:d0:79:6b:2e:18:a7:c4:3b:aa:
6c:7d:64:0e:db:cf:9f:39:98:8e:be:cd:30:5d:43:
ab:cf:4a:c9:68:32:9a:da:cf:76:6b:3d:c1:72:22:
7a:4c:9f:6a:ab:9b:19:9c:72:b4:b0:61:78:15:47:
97:b5:8d:b8:0a:f2:52:75:83:18:ab:6f:81:aa:b7:
8f:53:d3:6e:75:51:23:b9:f5:70:f1:7a:48:cf:81:
14:7e:fd:c9:13:01:d8:28:75:c5:39:3c:06:6a:04:
ca:3a:e2:4b:06:4f:f2:66:af:d6:32:92:39:76:ef:
c6:c0:a6:2b:2e:f9:fd:66:b9:c5:88:fb:b5:97:94:
1a:d4:f5:fa:4a:77:d7:4d:a0:a7:b9:4f:95:80:24:
9e:eb:26:85:49:01:3a:b2:0e:d6:2a:3f:4d:4f:45:
02:92:fb:a7:38:0d:31:53:0f:dd:c5:c1:8e:55:a3:
db:8a:f3:9c:1a:f5:b6:1d:7b:10:de:2f:c7:9f:c1:
24:40:30:be:96:17:60:51:86:06:0c:34:56:52:7a:
19:7c:cd:27:b6:50:c1:b4:35:60:98:62:65:61:b8:
97:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E3:05:8E:F1:15:AA:38:F6:5E:7C:62:D3:5D:C3:0A:75:DC:E2:91
X509v3 Authority Key Identifier:
keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:63:74:16:99:56:77:39:66:85:15:96:c0:05:69:28:cf:0a:
12:d2:65:fb:75:2e:9e:80:0f:8c:a6:72:d4:32:01:69:e9:7c:
51:54:29:af:53:5d:44:c2:50:9b:12:aa:42:5f:61:a9:51:71:
96:37:10:53:30:2a:b0:e7:a2:36:0f:fb:41:a1:db:a2:00:1d:
a4:cd:e6:79:f9:2f:41:80:6e:5c:91:8b:e6:71:af:7e:a8:cb:
6d:39:a5:13:f9:9f:6b:2a:33:c4:a8:5f:cb:d6:7f:8b:7f:5a:
77:5e:6f:ae:ed:cf:e5:02:9e:16:9a:3e:79:56:36:c2:dd:e9:
6a:e3:89:7c:26:eb:22:05:27:04:f7:8d:56:de:74:e0:23:2d:
9b:eb:60:83:54:23:74:10:72:d4:6c:1c:bf:28:7c:79:f2:cc:
2c:71:e1:5d:60:7a:7a:79:fc:87:4d:c7:c3:62:3e:27:e5:ad:
58:85:fc:5e:94:f9:e1:75:70:44:69:14:46:b5:42:05:dd:3f:
f3:43:fa:5c:84:45:fe:f8:6b:f2:bf:c6:93:5f:e3:af:5b:03:
1d:dd:a3:5f:b4:2e:84:62:7c:ad:0f:9b:54:e7:40:81:87:69:
b0:39:7f:78:8d:f9:7a:c2:ff:5a:93:02:7a:d5:fc:f8:e7:c5:
17:d7:ec:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:26:44 2025 by rpki-client